This isn't really language specific, but I'm wondering if anyone has any suggestions for a security model securely storing some user details in a way that could be accessed in an automated fashion.
i.e. I want to be able to send users automated emails when certain events happen but I don't want to store that email address or the event description in plain text.
If it wasn't an automated system then I would use some of the users credentials to salt the encryption but as it is, the application needs to be able to access it in some way but not an "intruder".
A solution can involve a second server instance (or separate physical server) but I still see myself presented with the same problems.